Expired, wrong domain, untrusted issuer, incomplete chain, mixed content — what each browser certificate warning actually means, and which of them a monitor can catch before a visitor does.
Features
Notes on domain, SSL, DNS and email monitoring
What shipped, and occasional deep dives into how the checks actually work.
SPF and DMARC are now part of the same daily DNS check as A, MX and NS records — and treated with the same urgency as a vanished MX record when either one disappears.
Domeny.php now accepts a CSV upload alongside the existing textarea, with an optional per-row client column — one shared list feeds the same validation and plan cap either way.
Seven tools worth knowing about if a client domain, certificate or DNS record has ever caught you by surprise — what each one actually does differently, and where Lapsewatch fits.
The maximum lifetime for a publicly trusted certificate is 200 days as of March 2026, dropping to 100 days in 2027 and 47 in 2029. Here’s the timeline, why it’s shrinking, and what it means for monitoring.